elysia vulnerabilities
CVEs whose affected-version data names the elysia package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-56669High· 7.5elysia has Inefficient Algorithmic Complexity and Interpretation Conflict
elysia has Inefficient Algorithmic Complexity and Interpretation Conflict
▾ Twilightelysia · elysiaEPSS 0.63%via GHSA
CVE-2025-66457High· 8.8Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication
Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.17 and below are subject to arbitrary code execution from cookie config. When dynamic cookies ar…
▾ Twilightelysiajs · elysiaEPSS 0.81%via NVD
CVE-2025-66456Critical· 9.8Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication
Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.0 through 1.4.16 contain a prototype pollution vulnerability in `mergeDeep` after merging result…
▾ Midnightelysiajs · elysiaEPSS 0.56%via NVD